
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json)
Hash identifier: nMBwaZTVMmBFT67U33MDGMJpDF3KO2HL3N1hBIi4GZ8=
Subject key identifier: 92:0E:F5:49:79:E3:F0:6D:8B:40:B1:9A:DE:AF:52:D3:96:DC:39:B8
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial: 01A0CA46DEFD98C6D8CDD8D839C0E958664A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
Manifest number: 1793
Signing time: Tue 22 Sep 2026 18:00:37 +0000
Manifest this update: Tue 22 Sep 2026 18:00:37 +0000
Manifest next update: Wed 23 Sep 2026 18:00:37 +0000
Files and hashes: 1: 2bkPk-Ot1qaZU9LokqaM6q6xdF0.roa (hash: FKs43X1xKZGBJpJSHiH34tt6wllzqU8nAr6+m1ghTU0=)
2: 4Zdg2MQSYklkR7c-l8IxUi_TKoU.roa (hash: nBkl98E0y+zp7UHLK7yW+DxyvmorfZ8LgRx1oXurW68=)
3: 4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa (hash: 5TzAawGzbQ+BkfeGhAzCFqHBUQwaDb09xlhuP0hvLkc=)
4: TG3cV_k_6T9HbxHghkTkoJbXOL0.roa (hash: burWH/ULqeg/o8zbECBxBAYn5WigohJQk5bXldlsBxE=)
5: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: Vp6jO6ZY+9xqUnHOmkls97ypIiEEsjnwYAwmuZKJGt0=)
6: YXwTm4AmXj7P3L-oHjQ9SCRkIB8.roa (hash: BEZ8noNyxFYH9s7y6LdJlLx1xzBr+aJybJ/406MKOQM=)
7: YYz0Ra-AyeN1y-x_tz99q6uROXw.roa (hash: d1wNmR3qGWlzOdOJM2Cg8ES808SIUCxvq3RhFeBu6hA=)
8: eq6O520dR9h5ZDTtwmQ1vFOWocg.roa (hash: WayNVSTyYUA3PrVVuq/1FxZpGE5s8+ZfaV8xAD2RAjQ=)
9: ioM3AXpUis9J40gGub2U9jhjnqY.roa (hash: FQpQflORWZoeyUv7a6WExDaKoi/29z9/D4oDeFDhbQc=)
10: qydP8Ocj7OIzj_U81Z5d_MW1T18.roa (hash: TfA/tv13aYJLnXxl1BypCd3xtsBlvQQuGSTtjj37SIo=)
11: x-4NJxZ2nwyfIPj7rGtcmDafiYQ.roa (hash: hbLajVkI4hSS08XndEILFj9TEfJ8gLTfZffiq7R2pbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:de:fd:98:c6:d8:cd:d8:d8:39:c0:e9:58:66:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Validity
Not Before: Sep 22 18:00:37 2026 GMT
Not After : Sep 23 18:00:37 2026 GMT
Subject: CN=920ef54979e3f06d8b40b19adeaf52d396dc39b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:33:58:85:90:85:95:4e:81:1b:8a:19:98:
d2:9a:36:91:58:4f:a0:1e:85:e0:b1:95:03:26:a4:
f5:05:d1:1d:1c:20:52:5f:f1:95:b5:3d:4f:62:e3:
5e:c5:f1:61:ef:43:82:ed:ce:4c:8c:a1:6a:41:d1:
5a:54:ac:7d:3a:a2:ee:95:d8:1c:03:ea:02:07:35:
7e:b3:0d:4b:58:9f:a3:5f:eb:c8:01:99:96:e9:22:
cb:a3:28:4f:27:a1:c1:df:be:8a:49:b2:e3:94:8e:
44:f3:9c:8c:d9:fa:f3:fc:f8:d1:6d:df:b0:26:ae:
1a:e8:97:c7:3f:70:a7:ed:fa:2a:1c:15:f9:4d:9f:
58:eb:88:e9:b6:78:92:b6:19:f5:d6:7c:11:74:6f:
e4:90:62:ab:f2:4d:81:05:da:ff:80:12:c7:b6:9f:
85:e5:6b:c6:d3:7d:b9:ca:e8:10:f3:9c:a1:bc:27:
d4:24:d8:d6:c1:43:22:3f:8e:16:a8:90:ef:30:dc:
60:88:c7:a3:aa:f0:1c:31:ab:5a:d6:e2:a9:d8:0f:
14:81:07:0f:25:79:a6:38:98:36:93:8b:08:e2:ed:
3e:e2:f5:e8:aa:83:e0:df:a5:73:49:47:7b:d4:1e:
a4:87:14:b5:55:8e:f1:c6:f1:b9:19:11:7d:5d:fb:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0E:F5:49:79:E3:F0:6D:8B:40:B1:9A:DE:AF:52:D3:96:DC:39:B8
X509v3 Authority Key Identifier:
keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3d:ba:8b:a7:fe:47:ab:5a:fb:93:b6:83:74:19:9e:0f:be:
c4:e3:31:ae:26:57:36:40:09:b5:8c:e7:24:e1:0c:d8:4d:50:
2d:96:b2:9f:9a:f7:0e:c1:99:83:9b:f9:01:62:8f:bd:a2:0c:
78:70:f0:95:f3:dc:5c:32:f4:74:d2:0c:7d:b3:17:9a:95:da:
ef:45:2b:0c:22:25:85:f9:42:af:2d:e1:d6:fc:ac:48:28:f2:
24:8e:e7:6d:52:d0:43:7f:73:10:14:02:90:a7:ad:f6:e0:c9:
d5:29:1c:33:36:41:b8:d7:3b:2b:9c:b8:59:df:df:c1:4f:73:
44:b0:7d:b6:95:ab:c9:e7:48:25:01:60:4a:2c:e8:eb:2d:aa:
12:93:f5:c7:bd:1a:8a:3e:39:54:1e:5c:1f:13:b2:88:8e:48:
6c:b9:51:94:f3:9a:23:cc:bc:5b:e5:e5:15:38:db:1a:79:f6:
d6:83:21:55:a1:b1:e3:73:b0:53:55:b4:13:ea:32:f6:07:43:
fb:f8:d6:25:8f:e0:92:69:d7:26:59:e1:db:2f:c0:59:b9:bb:
f6:5c:b9:a3:ef:50:72:48:3d:d0:0c:da:b2:22:df:47:94:bf:
4a:b4:37:c0:54:fe:a4:83:84:f3:a9:28:5c:95:e8:85:0b:2e:
5b:c0:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:50 2026 by rpki-client